1. Docs
  2. Pulumi ESC
  3. Integrations
  4. Dynamic login credentials
  5. infisical-login

infisical-login

    The infisical-login provider enables you to log in to Infisical using OpenID Connect or by providing static credentials. The provider will return a set of credentials that can be used to run Infisical CLI commands using the esc run command and also pull in secrets from Infisical using the infisical-secrets provider.

    Example

    values:
      infisical:
        login:
          fn::open::infisical-login:
            oidc:
              identityId: aaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee
    

    Configuring OIDC

    To learn how to configure OpenID Connect (OIDC) between Pulumi Cloud and Infisical, see the OpenID Connect integration documentation.

    Inputs

    PropertyTypeDescription
    siteUrlstring[Optional] - The base URL of the Infisical instance you want to connect to. May be omitted if default US instance is used.
    oidcInfisicalLoginOIDC[Optional] - OIDC configuration to log in to Infisical.
    staticInfisicalLoginStatic[Optional] - A static set of credentials to use to log in to Infisical.

    InfisicalLoginOIDC

    PropertyTypeDescription
    identityIdstringThe identityId of the Identity to assume.
    subjectAttributesstring[][Optional] - Subject attributes to be included in the OIDC token. For more information see the OpenID subject customization documentation

    InfisicalLoginStatic

    On your Infisical Identity, add a new Auth method and select Universal Auth. Create a new Client secret and copy both the clientID and clientSecret from Universal Auth.

    PropertyTypeDescription
    clientIdstringThe Universal Auth client id.
    clientSecretstringThe Universal Auth client secret.

    Outputs

    PropertyTypeDescription
    siteUrlstring[Optional] - The base URL of the Infisical instance you authenticated to. May be omitted if default US instance was used.
    accessTokenstringThe access token to use for authentication.